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REMOTE EXECUTION OF SOFTWARE USING WINDOWS 
MANAGEMENT INSTRUMENTATION 



5 FIELD OF THE INVENTION 

The present invention relates to an apparatus and method for the 
remote execution of software using a Windows Management 
Instrumentation. 

10 

BACKGROUND OF THE INVENTION 

Computers are coupled together in a network to provide digital 
communications. Computer networks are critical for carrying digital data 

15 used for Internet, IP telephony, video teleconferencing, e-commerce, file 

transfers, e-mail, databases, etc. And as these networks become bigger, more 
powerful, and more versatile, the networked computers can be programmed 
to perform more complex tasks. Accordingly, software applications are 
likewise becoming quite sophisticated. One problem arises when software 

20 has to be distributed across the network. For instance, new software is 

routinely being installed to give users new functionalities; software upgrades 
are installed for improved efficiency; and network software is installed to 
help monitor and administer the performance of the network. 
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In the past, a network administrator would have to physically visit 
each of the individual computers and manually install the software onto that 
particular station. This is a time consuming task. Furthermore, it is 
inefficient because of the associated downtime as software is being installed. 
5 In addition, there is much overhead expended in administering, tracking, and 
maintaining an accurate and updated log of the software state for each of the 
computers across the entire network. There can also be problems 
encountered with respect to software compatibility, troubleshooting, and 
licensing issues. 

10 

One prior art method to overcoming some of these problems involves 
executing software remotely over the network. Figure 1 shows a prior art 
method for the remote execution of software. A device manager 101 resides 
on a server operated by the network administrator. It communicates and 

15 issues calls to a managed device 102 over the network. Initially, the device 
manager 101 creates a service on the managed device 102, step 103. The 
service is created on the managed device, which also registers itself, step 107. 
This is accomplished through a remote call. Next, the device manager 101 
starts the service in step 104. A remote call is made to start the service on the 

20 managed device 102. The service calls the executable on the device manager's 
file system, step 108. In response, the executable called on the device 
manager 101 launches on the managed device 102 in step 105. The executable 
starts, runs, and then finishes on the managed device 102 in step 109. Lastly, 
in step 106, the device manager 101 stops the service and deletes it on the 
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managed device 102. This causes the managed device 102 to stop, unregister, 
and delete the service in step 110. 

Although this prior art solution solves the need to manually load 
5 software, it nevertheless suffers some serious drawbacks. Namely, this prior 
art method accomplished remote software management by a multi-step, 
complex creation of services, which executed an install executable on the 
management server. As such, this previous approach required extensive 
error checking and redundant network calls due to its complexity and 
10 number of required successful network connection calls. Furthermore, 

existing "CreateProcess" APIs are limited to the local systems, and cannot be 
executed on remote target systems over a network. Moreover, the prior art 
tended to be restricted to special cases or had to be customized to meet 
certain specific installation needs. 

15 

Therefore, there exists a need in the prior art for an improved, 
universal remote execution of software process. The present invention 
provides a unique, novel solution to these and other problems. 
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SUMMARY OF THE INVENTION 

The present invention pertains to an apparatus and method for remote 
execution of software over a client-server network. Initially, both the server 
5 and client computers have Windows Management Instrumentation (WMI) 
loaded as part of their operating system. The device manager of the server 
first instanciates a WMI CreateProcess object on the client computer. This 
will call an executable residing on the device manager. Within the client, the 
process is started, resulting in a call to an executable on the device manager. 
1 0 Back on the server computer, the executable on the device manager is called 
and launched on the managed device. Lastly, the executable starts and 
finishes on the client computer. Thereby, the present invention enables a 
network administrator to remotely execute code on a host of client computers 
from a central server over a network connection. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example, and not by way 
of limitation, in the figures of the accompanying drawings and in which like 
5 reference numerals refer to similar elements and in which: 

Figure 1 shows a prior art method for the remote execution of 
software. 

10 Figure 2 shows a method for the remote execution of software using 

Windows Management Instrumentation (WMI) according to the currently 
preferred embodiment of the present invention. 

Figure 3 shows the software running on a network upon which the 
15 present invention may be practiced. 

Figure 4 shows a specific device manager driven process for a remote 
execution of a software package. 

20 Figure 5 shows the process by which the present invention is used to 

remotely uninstall software. 

Figure 6 is a flowchart describing the steps for the remote 
uninstallation of software according to one embodiment of the present 
25 invention. 
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DETAILED DESCRIPTION 

An apparatus and method for the remote execution of software using a 
web based enterprise management standard is described. In the following 
5 description, for purposes of explanation, numerous specific details are set 
forth in order to provide a thorough understanding of the present invention. 
It will be obvious, however, to one skilled in the art that the present invention 
may be practiced withotit these specific details. In other instances, well- 
known structures and devices are shown in block diagram form in order to 
10 avoid obscuring the present invention. 

Figure 2 shows a method for the remote execution of software using 
Windows Management Instrumentation (WMI) according to the currently- 
preferred embodiment of the present invention. Basically, WMI is an 

15 infrastructure to support the CIM model and Microsoft-specific extensions of 
the Common Information Model (CIM). CIM is an object-oriented model that 
represents and organizes the information in a "managed environment." CIM 
objects include computer systems, devices (like printers and batteries), 
controllers (for example, PCI and USB controllers), files, software, physical 

20 elements (like chassis and connectors), people, organizations, networks, 

protocol endpoints, policy, and more. CIM also is evolving its eventing object 
hierarchy and mechanisms. Going beyond just describing raw data, CIM 
provides additional capabilities. It allows the definition of associations and 
methods. Associations describe relationships between objects-dependencies, 

25 component relationships (when an object is a component or part of a whole), 
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connections (topologies), and more. Input/output parameter lists and return 
codes can be defined for methods. CIM defines a series of objects with 
respect to a basic set of classes and associations. The WMI infrastructure 
ships in Microsoft Windows NT© 4.0 SP4 and Windows 2000. It runs as the 
5 "Windows Management" Service." The architecture of the Windows 
Management Instrumentation technology consists of: a management 
infrastructure, management applications, and providers of data from 
"managed objects." 



10 A device manager 201 runs on a server coupled to a network (LAN, 

MAN, WAN, or a virtual network). The device manager 201 comprises a 
collection of routines which acts as an interface for various drivers. The 
device manager 201 instanciates a WMI CreateProcess object on the target, 
step 203. The CreateProcess object calls an executable residing on the device 

15 manager 201. In other words, a Process object is created and then a Create 
method is executed. A managed device 202 resides on a computer coupled to 
the network. The process is started on the managed device in step 202, which 
calls an executable on the device manager 201. In turn, the executable on the 
device manager 201 is called in step 204. It is then launched on the managed 

20 device 202. Lastly, in step 206, the executable starts and finishes on the 
managed device 202. 



Figure 3 shows the software running on a network upon which the 
present invention may be practiced. A network administrator operating from 
25 a server 301 can select any of the client computers on that network to which 
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they have access privilege for the remote execution of software. For instance, 
client computer 302 can be selected by the network administrator over a local 
area network (LAN) connection 310. Server 301 has a Windows compatible 
operating system 303. Included within the Windows O/S is a Windows 
5 Management Instrumentation software package 304 and a device manager 
305. Any number of different executable code 306 can be stored within the 
memory of server 301. Client computer 302 (e.g., laptop, desktop, server, 
workstation, terminal, portable computing device, etc.) operates off a 
Windows O/S 307. Included within the Windows O/S 307 is the Windows 
1 0 Management Instrumentation software package 308 and a Win32_Process 
Object 309. 

The executable code 306 is installed on the management device, server 
301. The target system, client 302, already has WMI 308 installed. When a 

15 remote install of the package is required, the device manager 305 takes the 

following steps as shown in Figure 4. First, it connects to the remote system's 
system\root\cimv2 space, step 401. Next, it creates a Win32_Process class 
object, step 402. It then executes the Win32_Process->Create method with the 
path to the executable on the management server as an argument, step 403. 

20 The remote target system then executes the code which resides on the 
management server, locally on itself, step 404. 



Thereby the present invention confers several advantages over that of 
the prior art. The present invention greatly simplifies the process of remote 
25 execution of software by eliminating the need for the creation of a remote 
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service. Furthermore, the present invention minimizes the number of 
network calls, which reduces network congestion and therefore reduces the 
redundancy code necessary for service type remote uninstall. As such, the 
present invention increases the robustness of remote execution of software 
5 packages. It also eliminates any need for unpacking of software on the target 
device. It should be noted that the present invention requires installation of 
WMI only, which comes with on all Windows 2000 and Windows XP 
operating systems. The present invention can be used to execute any desired 
code which resides anywhere on the network, but typically is found on a 
1 0 management server of some kind. 



Some typical examples of an application would be remote deploy and 
uninstall of software. The install /uninstall code would reside on a 
management server. The management server would then carry out the 

15 process to have the target system execute the code which resides on the 
server. Note that the executables have to be placed in directories with the 
correct share/access permissions. A typical configuration may be the one 
used for the software packages' directories. Also, the Distributed 
Communication Object Model (DCOM) registration of the management code 

20 must be addressed (e.g., by using the Global Settings Manager). Execution of 
the code would result in installation or uninstallation of software packages. 
For example, the present invention could be used to monitor the states of 
various network elements. 
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In one embodiment, the present invention is used for the remote 
uninstallation of software using WML Figure 5 shows the process by which 
the present invention is used to remotely uninstall software. A device 
manager 501 running on a server is used to communicate with the managed 
5 device 502. The device manager 503 previously pushes an application to the 
target device, along with the uninstall executable, step 503. This causes the 
managed device 502 to initially install the application, whereby the uninstall 
executable also resides on the target system, step 505. If the target system 
does not already have WMI installed, it is installed at this time. Next, when 
10 desired, the uninstall executable is started on the target device by creating a 
Process object and then executing a Create method in step 504. As a result, in 
step 506, the uninstall executable on the target system runs. And the 
application is thereby uninstalled. 



15 Figure 6 is a flowchart describing the steps for the remote 

uninstallation of software according to one embodiment of the present 
invention. Initially, the executable code for the uninstall of a software 
package is placed on the target system, step 601. This is typically done 
during initial installation of the software. It is assumed that the target system 

20 already has Microsoft WMI installed, or it has Microsoft WMI installed when 
the software package is installed. When a remote uninstall of the package is 
required, the device manager performs steps 602-604. In step 602, the device 
manager connects to the remote system's system\root\cimv2 space. A 
Win32_Process class object is created, step 603. The device manager then 

25 executes the Win32_Process->Create method with the path to the uninstall 
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executable as an argument, step 604. In other words, the create method is 
being executed on the Win32_Process. The location of the uninstall 
executable on the target system can be stored in a known place, such as the 
target system's registry or a file, upon initial installation. 

5 

The present invention for the remote uninstallation of software offers 
several advantages. The prior art accomplished remote software 
management by a multi-step, complex creation of services, which executed an 
uninstall executable on the management server. This previous approach 

10 required extensive error checking and redundant network calls due to its 
complexity and number of required successful network connection calls. In 
contrast, the present invention simplifies the process by eliminating the need 
for the creation of a remote service and thereby minimizing the number of 
network calls. Furthermore, the present invention increases the robustness of 

15 remote uninstall of software packages. It also reduces the complexity of 
remote uninstall by leveraging the initial installation. Additionally, the 
number of network calls is reduces, thereby reducing the redundancy code 
necessary for service type remote uninstall. 

20 It should be noted that the foregoing descriptions of specific 

embodiments of the present invention have been presented for purposes of 
illustration and description. They are not intended to be exhaustive or to 
limit the invention to the precise forms disclosed, and obviously many 
modifications and variations are possible in light of the above teaching. For 

25 example, the present invention is not limited to WMI. It is equally applicable 
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to any software routines having equivalent functionalities. One such 
standard upon which the present invention may be practiced includes the 
Web Based Enterprise Management (WBEM) standard. WBEM is a set of 
management and Internet standard technologies developed to unify the 
5 management of enterprise computing environments. WBEM provides the 
ability for the industry to deliver a well-integrated set of standard-based 
management tools leveraging the emerging Web technologies. The 
embodiments were chosen and described in order to best explain the 
principles of the invention and its practical application, to thereby enable 
10 others skilled in the art to best utilize the invention and various embodiments 
with various modifications as are suited to the particular use contemplated. 
It is intended that the scope of the invention be defined by the Claims 
appended hereto and their equivalents. 
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